Privacy Policy

1. Who we are and what this policy covers

Dreamsy is operated by S PLUZHNIKOV & A PLUZHNIKOVA PTY LTD (ACN 655 846 978, ABN 44 655 846 978), trading as Well Well Wellness, of 139/10 Albert Avenue, Broadbeach, Queensland, Australia 4218 ("Dreamsy", "we", "us"). We are responsible for the personal information described in this policy.

This policy covers the Dreamsy mobile application, the Dreamsy website, support communications, subscriptions, notifications, analytics, and the optional My Voice feature. It explains what we collect, why we use it, who receives it, where it may be processed, how long it is kept, and the choices available to you.

2. Parent-operated service

Dreamsy is a parent-operated service. It is intended to be selected, configured and controlled by an adult, including when it is used anonymously or without a registered account. A parent, legal guardian or other adult caregiver is the account holder or anonymous user, purchaser, person who makes privacy choices, and person responsible for supervising child listeners. Children may listen to age-appropriate stories selected by the adult, but they must not independently create or control an account, make purchases, contact support, upload files, change privacy settings, or use the My Voice feature.

We do not ask for a child's name, date of birth, email address, profile or voice. Onboarding answers describe the adult's intended listening routine and are not used to create a child profile. If you believe a child has provided personal information directly to Dreamsy, contact us so we can investigate and remove it where required.

3. Information we collect

Account and preferences

• Account identifier, email address, display name, sign-in method and whether the account is anonymous or registered.
• Language, onboarding choices, favourites, notification preference and other app settings.

Subscription and transaction information

• Store, product, entitlement, trial and renewal status; transaction or purchase identifiers; price and currency where supplied by the store.
• We do not receive or store full payment-card numbers for purchases completed through an app store.

Usage, device and diagnostic information

• App version, operating system, device and app identifiers, IP address, push-notification token and approximate region inferred by service providers.
• Session, screen and feature events; story, playlist, favourite and playback interactions; subscription state; crash reports and technical diagnostics.
• After sign-in, analytics may be linked to an account identifier so activity can be understood across sessions.
• For My Voice regional availability, the adult's declaration that they live in or are currently located in Quebec, Illinois, Texas, Washington or elsewhere; device-locale country and time-zone offset; and, where available, country or subdivision signals supplied by our cloud infrastructure.

Optional My Voice information

• The adult's voice recording, file name, format, size, upload time and a consent record.
• Acoustic characteristics derived from the recording, a trained voice model and index, audio samples, stories generated in that voice, feature status, chosen display name and feedback.
• Technical records associated with voice processing, including model and job identifiers, processing status, error information, storage paths and consent records.
• We treat voice recordings and derived voice models as high-sensitivity information whether or not they are legally classified as biometric information in every jurisdiction. My Voice uses them only for speech synthesis. Dreamsy does not use them to verify identity, authenticate a user, detect fraud or recognise a person across services.
• The feature is for the adult account holder's own voice only. Do not upload a child or another person's voice.

Support and website information

• Messages, email address and account details you choose to provide when contacting support.
• Basic hosting and security logs when you visit the website, such as IP address, requested page, browser information and time of request.

4. How we collect and use information

We collect information from the adult account holder, automatically from the app or website, from the applicable app store when a purchase is made, and from service providers that operate Dreamsy. We use it to:

• Create and secure accounts, remember settings, provide stories, synchronise favourites and manage subscriptions.
• Send service, security and requested notification messages.
• Provide support, prevent abuse, investigate errors and maintain app-integrity and other security controls.
• Measure app use, understand feature performance and improve Dreamsy.
• At the adult's request and with express consent, create a personal voice model and generate audio in that voice.
• Meet legal, accounting, consumer-protection and regulatory obligations.

Dreamsy does not use raw voice recordings, derived voice models, voice characteristics, generated audio or story content to train general-purpose or shared AI models.

5. Service providers and other disclosures

We do not sell personal information or share it for cross-context behavioural advertising. We disclose information only as needed to operate Dreamsy, complete purchases, comply with law, protect users and the service, or complete a business transfer subject to appropriate safeguards. We do not sell, lease, trade or otherwise profit from voice data itself.

• Google LLC: authentication, database, storage, cloud processing, app integrity, analytics, crash reporting, push messaging and hosting.
• RevenueCat: subscription entitlement, purchase history and limited customer attributes used to provide and support App Store and Google Play subscriptions.
• AI voice processing: My Voice information is processed in the European Union in accordance with the GDPR and other applicable data-protection laws and regulations.
• App store operators: collect and process billing information directly under their own privacy policies. Dreamsy receives limited purchase, subscription and entitlement information from the applicable store and does not receive full payment-card details.
• Email and support providers: delivery and handling of account, support and rights-request communications.

Providers process information under their contracts and their own legal obligations. Dreamsy requires processors to use information only on our instructions, protect it, assist with rights requests and deletion, and notify us of relevant security incidents. Provider subprocessors may change.

6. Your choices and privacy rights

Depending on applicable law, you may ask to access, correct, delete, restrict or receive a portable copy of your personal information; object to certain processing; withdraw consent; or complain to a privacy regulator. You may also:

• Turn push notifications off in Dreamsy or device settings.
• Delete My Voice data from the My Voice screen.
• Delete the Dreamsy account from Account settings or use the public deletion instructions.

Providing an email address or store information may be necessary to create an account, restore or verify a purchase, or answer a support request. A voice recording and express consent are necessary only if you choose My Voice. If you do not provide information required for a feature, we cannot provide that feature.

Dreamsy does not make decisions producing legal or similarly significant effects about you solely by automated means. Analytics may group events and usage patterns, but it is not used to determine eligibility, prices, access to legal rights or other significant decisions.

Email hello@dreamsy.app to make a privacy request or complaint. Include the account email or identifier, the right or concern involved, and enough detail for us to locate the relevant information; do not email a voice file, password or payment-card number. We may ask you to verify control of the account and will acknowledge the request, explain any additional information needed, and respond within the period required by applicable law. If we cannot fulfil a request, we will explain why and identify available escalation options. We will not discriminate against you for exercising a legal privacy right.

7. Data Security

We use technical and organisational measures intended to protect personal information, including authenticated access, access-control rules, app-integrity controls, encryption in transit, provider encryption at rest, restricted administrative access and logging. No storage or transmission method is completely secure.

• Keep your sign-in credentials and device secure.
• Do not send passwords, payment-card details or voice files by email.
• Contact us promptly if you suspect unauthorised account access.

If a data breach is likely to cause serious harm or otherwise requires notification, we will notify affected individuals and the relevant regulator as required by applicable law.

8. Website cookies and app analytics

The Dreamsy public website currently does not load advertising pixels, third-party analytics or nonessential cookies. Website hosting infrastructure may create basic request and security logs. If website tracking is added later, we will update this policy and provide controls where required.

The mobile app uses analytics and crash-reporting services as described above. Mobile software identifiers and local app storage are not browser cookies. See the Cookie Policy for the current website position.

9. International Data Transfers

Dreamsy is operated from Australia. Personal information may be processed in Australia, the United States, EU and other countries where our providers or their disclosed subprocessors operate.

10. Retention and deletion

We use the following maximum retention periods unless law requires a longer period, a dispute requires preservation, or a shorter period is required in your jurisdiction:

• Account and preferences: while the account exists, then deleted or de-identified within 30 days after a valid account-deletion request. Encrypted backup copies expire within 90 days.
• Raw voice recordings: no longer than 30 days after successful model creation, unless the adult asks us to retain the recording to retry the feature; sooner upon My Voice or account deletion.
• Failed or abandoned voice uploads and temporary processing files: no longer than 30 days.
• Derived voice model, model index, samples and generated voice audio: while My Voice remains active, then deleted from active systems within 30 days after My Voice or account deletion. Encrypted backup copies, where they exist, expire within 90 days and are not restored to active use.
• Voice-consent, withdrawal and deletion evidence: the minimum record needed to demonstrate the event for up to seven years, with voice files removed and identifiers restricted or pseudonymised where reasonably possible.
• My Voice regional declaration: the current declaration and availability decision while the account exists or until replaced by a later declaration, then removed with the account. We do not retain precise location in this record.
• Analytics event-level data: up to 14 months; aggregated or de-identified statistics may be retained longer where they no longer identify a user.
• Crash and diagnostic logs: up to 90 days, unless needed longer to investigate an active security or reliability incident.
• Push tokens: while notifications are enabled or the account is active, then removed within 30 days after disablement or account deletion.
• Support correspondence: up to 24 months after the request closes, or longer where necessary for a dispute or legal obligation.
• Purchase, tax and accounting records: up to seven years or the longer period required by applicable law. Apple, Google and RevenueCat may retain their own transaction records under their policies.
• Website request and security logs: up to 90 days unless required for an active security investigation.

Deleting an account does not cancel an App Store or Google Play subscription.

11. Child listeners

Dreamsy includes stories that may appeal to children, but the service and every data-producing account function are designed for the adult account holder. The adult must supervise listening and keep purchases, account details, external links, support, privacy choices, file upload and My Voice controls away from children.

We do not knowingly collect personal information directly from a child. Children must not provide personal information to Dreamsy or use any account, support, free-text, upload, recording or other data-submission feature. Adult account holders must not enter, upload, record or otherwise submit any child's personal information, including a child's name, contact details, image, voice, location, school, health information or other identifying information. This prohibition includes My Voice samples. If we learn that child information has been submitted, we may immediately restrict, suspend or terminate the account and delete, isolate or restrict the information.

12. Changes to This Privacy Policy

We may update this policy as Dreamsy, its providers or legal obligations change. We will change the effective date and version on this page and use an appropriate additional notice for material changes.

13. Contact Information

For any questions regarding privacy and data protection, please contact us: